Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: LSSt3lAyaGYt81w2OD9WeEywPrA6PmiBg19ANrJy9Gw=
Subject key identifier: 6F:53:EA:93:B9:39:D6:0E:03:FD:2C:94:8A:A6:E2:E4:C8:A6:FB:0B
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 019D284E3A898230878B8F2581BE787C0685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:48 +0000
Manifest this update: Thu 26 Mar 2026 04:01:48 +0000
Manifest next update: Fri 27 Mar 2026 04:01:48 +0000
Files and hashes: 1: 2Y0vePsYMdGLC2k19HfRsz12tcc.roa (hash: 9OMDv7NsOhqDHoVNou730t3Tke6hQqKOi0fzyySfDqc=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: tWlpnbE4SzBmv9s5SgMfJmZ1Pz52nzxdnnhOnK50Rbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3a:89:82:30:87:8b:8f:25:81:be:78:7c:06:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Mar 26 04:01:48 2026 GMT
Not After : Mar 27 04:01:48 2026 GMT
Subject: CN=6f53ea93b939d60e03fd2c948aa6e2e4c8a6fb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:d8:0b:fc:65:f3:1a:54:f9:dd:44:5c:a5:
aa:6b:58:41:99:d9:bf:e4:13:4a:7d:54:cf:d9:75:
aa:64:ff:5a:62:17:86:6f:50:56:cb:7d:24:da:74:
63:14:a4:ce:8b:78:cc:0b:d2:31:b8:71:ae:8b:21:
35:3b:7f:82:21:4c:13:55:42:b5:69:cb:e7:5d:ba:
18:5b:46:a5:16:14:cd:05:e9:5c:d9:a6:86:25:3e:
2c:49:c3:b8:da:8a:56:cc:1f:c3:fd:0e:db:c4:e1:
39:f1:83:26:66:30:25:f1:b2:f6:ab:fc:36:13:e2:
a1:37:04:2c:35:ce:62:0a:c7:30:67:03:d0:85:a3:
e4:bc:66:ba:23:47:53:b4:be:53:f2:0b:5f:ee:12:
0c:e9:99:82:c8:6f:df:38:66:ef:26:91:4c:6d:df:
d4:3a:cb:03:8d:0d:20:56:30:9e:65:0c:c0:a5:6d:
e4:14:e8:e2:20:2e:47:9d:5e:cd:1d:7f:c4:c6:f2:
4e:46:65:cc:66:a6:52:42:67:97:75:f2:fa:ab:84:
fc:de:69:a0:79:89:84:4f:ed:d5:67:98:2a:e3:d4:
17:da:1d:aa:72:00:f6:92:05:9f:cb:57:de:af:78:
44:20:fc:62:4e:0a:c7:c8:7b:35:7c:32:f7:1e:2f:
0e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:53:EA:93:B9:39:D6:0E:03:FD:2C:94:8A:A6:E2:E4:C8:A6:FB:0B
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3b:a8:ca:e9:9a:54:25:9c:c7:1b:8a:d4:a6:be:58:7b:b4:
b1:9a:b2:fc:27:3d:df:da:18:bb:97:f5:99:f1:ae:6e:81:a5:
67:98:90:82:97:3b:16:eb:19:6f:9b:39:af:3f:d3:2c:7b:f0:
1f:cd:fd:53:ac:cc:2f:0a:b4:79:d7:76:c6:4d:40:79:a5:55:
9b:9f:89:02:eb:e2:a6:97:1f:a3:65:e3:dd:2d:3b:38:3c:a1:
87:2e:4b:32:5e:9b:48:e4:bf:f4:24:0c:73:a8:54:fc:cd:18:
2f:e8:6a:b4:b5:b5:54:63:2e:30:72:d3:38:80:e6:d1:47:cf:
16:b6:df:a0:73:31:49:bc:f8:b8:0c:99:0f:4f:be:a9:ea:f0:
1b:21:fe:e6:f6:c4:96:cc:33:05:a8:0d:3f:e4:1c:70:17:9f:
db:e6:84:c2:5f:b2:0c:f9:06:8c:24:1d:d6:e0:8f:1d:19:3b:
d5:ed:96:69:32:e4:22:bf:43:36:82:bd:8d:52:2b:3c:80:a3:
e3:79:3a:26:da:0d:4d:92:3e:1f:d1:b1:a8:2e:2c:6e:be:79:
14:fc:1d:34:fe:e0:69:7b:68:7f:82:4d:4e:0d:d6:b8:8b:49:
58:04:2d:91:d9:da:b4:07:30:87:42:16:77:e4:28:c4:96:ca:
8b:1b:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:28:42 2026 by rpki-client